Feedback relating to
INTOSAI EDP Audit Committee's products

Areas where committee should focus on

The INTOSAI EDP Audit Committee will present its workplan for the period 2002-2005 to the XVII INTOSAI to be held in October 2001. Following are the suggestions on activities that the committee should focus on:

1. Research studies

Austria	Audit in a client server environment
Bahrain	IT related fraud Performance auditing of IT infrastructure Review of security and communication controls Review of E-business projects
Botswana	IT audit curriculum EDP development IT audit course ware Use of IT tools security assessments etc Role of company directors
Brunei	Audit of a fully integrated accounting system (payment, expenditure, revenue, payroll, store, inventory control) Audit of e-business activities
Colombia	Network security Database security IT fraud The audit IT methodology
Estonia	E-services benefits and risks (public services) Software and tools used for EDP audit
Ethiopia	IT security Contingency planning Fraud on IT related activities Communication IT infrastructure development
Iceland	Fraud E-commerce EFT Computer crime Large application SW accounting packages
Iran	Systems & methods of audit mechanization Survey on the successful experiences on audit mechanization.
Israel	Comparative study - Implementation of IT by Governments Knowledge Management in SAIs
Japan	IT environment (hardware and software platform) IT system testing IT system specification
Kenya	Necessary strategies and policies for IT infrastructure management (Audit of IT infrastructure) Preparation of good practice guide (IT fraud) Detection and prevention of IT related fraud Computer related communication
Kuwait	Auditing e-government
Kyrgyz Republic	It is difficult for us to answer this question, because we have not any IT systems in our office
Lithuania	Case studies on using computer-assisted audit techniques (CAAT) Benchmarking and tendencies of CAAT development Evaluation of IT development Internal audit of IT systems
Nepal	Forensic audit IT security system
Norway	E-commerce in Government (including public procurement0 Horizontal IT projects in government sector Internet information security
Peru	E-commerce audit IT related fraud Security on communication Business continuity planning
Poland	Use of public resources for IT IT audit tools Auditing the effectiveness of the IT systems in place Legal regulation in the area of IT use
Romania	Organisation and management of audit in the IT domain Audit methods and techniques in the IT domain IT security SAI's IT organisation and management Computer assisted audit
Saudi Arabia	E-commerce control and security Methodology of down loading data of Auditees
Thailand	Information systems security and control Using IT to aid audit work Auditing networks Performance audit of IT operations
Turkey	Use of IT preparing and planning audits Data downloading and conversion Use of IT performing audits IT links between SAI's and auditees IT security
Vietnam	IT related fraud E-business IT procurement IT management and control EDP system
Zimbabwe	E-commerce /E-business Communications

2. Preparation of audit guidance

Austria	Detection of IT-related fraud
Bahrain	IT related fraud Performance auditing of IT infrastructure Review of security and communication controls Review of E-business projects
Colombia	Networks Database
Estonia	EDP audit planning Surveys for assessing EDP systems of governmental organisations
Ethiopia	Performance Audit on IT IT fraud detection and accounting IT audit guideline Client server communication The use of CAAT
Fiji	Audit guide on carrying out IT audits
Hungary	Controls of PKI (Public Key Infrastructure)
Iceland	Acquisition of hardware and software Delivery control Risk analysis On COSO/COCO models
Iran	Data banks to support audit Facts on IT audit Production and coordination of input data of auditees in mechanized form.
Japan	Audit of IT procurement Audit of e-government
Kenya	Designing and developing EDP systemPreparation of good practice guide (IT fraud) IT related frauds Audit of EDP systems
Lithuania	Guidelines for evaluation of efficiency and cost-effectiveness of IT system Guidelines for evaluation of IT project management
Nepal	Application control Auditing EDP based system Disaster Recovery plan
Norway	Guidelines related to suggestions under G1
Peru	Planning Payroll Financial management Valnzacion (how much must it cost things)
Poland	Use of public resources for IT IT audit tools Auditing the effectiveness of the IT systems in place Legal regulation in the area of IT use
Romania	Organisation and management of audit in the IT domain Audit methods and techniques in the IT domain IT security SAI's IT organisation and management Computer assisted audit
Saint Lucia	Practical use of CAATS Auditing of EDP systems Evaluation of EDP controls
Saudi Arabia	Computer hardware acquisition LAN security
Thailand	IT audit program for industries such as - Banking - Telecommunication - Health - Education
Turkey	IT tools State budget execution audit performed with IT tools IT audit training Use of IT planning and preparing audit
Vietnam	E-commerce /E-business Client-server environment Distributed systems Audit of source-code/programs Database systems
Zimbabwe	E-commerce /E-business Client-server environment Distributed systems Audit of source-code/programs Database systems

3. Advanced Training Modules

Australia	Auditing e-commerce activities Outsourcing Performance measurement of IT
Austria	Control of accounting systems
Bahrain	IT related fraud Performance auditing of IT infrastructure Review of security and communication controls Review of E-business projects
Colombia	Application of CAATs Networks Database Application the audit IT methodology
Estonia	Auditing e-government (e-services) EDP audit planning Auditing EDP systems performance
Ethiopia	Database management Networking IT audit IT security Use of CAAT
Fiji	IT auditing
Hungary	Controls of PKI (Public Key Infrastructure)
Iceland	COBIT Sampling Control self assessment Application software programming eg Visual Basic Internal Audit
Kenya	Provide advanced training modules on areas as listed in G2 above.
Lithuania	Application of CAAT in the audit process Training on evaluation of efficiency and cost-effectiveness of IT system. Training on evaluation of IT project management
Nepal	Data extraction and analysis Statistical sampling Auditing system development process
Norway	IT- infrastructure guidelines
Peru	IT security Audit developing systems IT controls
Poland	Use of public resources for IT IT audit tools Auditing the effectiveness of the IT systems in place Legal regulation in the area of IT use
Saint Lucia	Detecting computer/IT fraud
Saudi Arabia	Utilizing CAAT's
Thailand	Using audit software to aid audit work Evaluation of general controls Evaluation of application control IT related risk assessment
Turkey	Performing audits State budget execution IT security Data downloading and conversion from auditees
Vietna`m	E-business IT related fraud IT procurement Management and control of IT system Communication security
Zimbabwe	Auditing of operating system Auditing the Internet & E-mail CAATs and downloading or Data (Advanced) Auditing distributed systems i.e. SAP Auditing of programs, auditing of e-business

4. Other Areas

Austria	Final reports of research studies are often used to read and to take use of it in practical audits these reports should contain a management summary and a guidelines for practical use .
Ethopia	- Website for all members - Electronic learning system development - Bulletin board on website for communication and comment
Turkey	Links between SAI's

Feedback relating to INTOSAI EDP Audit Committee's products

Areas where committee should focus on

1. Research studies

2. Preparation of audit guidance

3. Advanced Training Modules

4. Other Areas

Feedback relating to
INTOSAI EDP Audit Committee's products